CLAIMS 

What is Claimed is: 

1 . A system for checking consistency of a lock-step process comprising: 
5 a production microcontroller installed on a test circuit, the production 

microcontroller running a microcontroller code and producing a first value; 

an ICE (in circuit emulator) coupled to a host device, wherein the ICE 
emulates the production microcontroller to form a virtual microcontroller, the virtual 
microcontroller running the microcontroller code simultaneously with the 
10 production microcontroller and producing a second value; and 

an interface for coupling the production microcontroller and the ICE enabling 
JI transmission of the first value to the ICE, wherein the ICE compares the first value 
eg against the second value. 

y| 2. A system for checking consistency of a lock-step process as recited in 

15 Claim 1 wherein the microcontroller is installed on a POD. 

"I 3. A system for checking consistency of a lock-step process as recited in 

[I Claim 1 wherein the microcontroller is substantially copied in a field programmable 
gate array (FPGA) in the ICE. 

4. A system for checking consistency of a lock-step process as recited in 
20 Claim 1 where the production microcontroller sends to the ICE a result of an 

execution of a line of code. 

5. A system for checking consistency of a lock-step process as recited in 
Claim 1 where the ICE ignores execution of the microcontroller code if the 
microcontroller code executed by the microcontroller is an I/O instruction. 
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6. A system for checking consistency of a lock-step process as recited in 
Claim 1 where the ICE ignores execution of the microcontroller code if there is an 
interrupt in operation of the microcontroller. 

7. A system for checking consistency of a lock-step process as recited in 
5 Claim 1 wherein the ICE stores the second value for comparison with the first value 

received from the production microcontroller. 

8. A system for checking consistency of a lock-step process as recited in 
Claim 1 wherein the ICE sends an error signal when the first value and the second 
value are inconsistent. 

10 9. A system for checking consistency of a lock-step process as recited in 

H Claim 1 wherein the ICE independently detect inconsistency in the first value and 
3J the second value when there is an interrupt in operation of the production 
m microcontroller. 

J7 10. A system for checking consistency of a lock-step process as recited in 

;i"5 Claim 1 wherein the production microcontroller may receive data from a test circuit. 
2 11. A system for checking consistency of a lock-step process as recited in 

Claim 1 wherein the production microcontroller may receive data from a product 

that is intended to be controlled by the microcontroller. 

12. A system for checking consistency of a lock-step process as recited in 
20 Claim 1 wherein the production microcontroller provides the ICE with I/O read 

information sent by the test circuit. 

13. A system for checking consistency of a lock-step process as recited in 
Claim 1 wherein the production microcontroller provides the ICE with I/O read 
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information sent by a product that is intended to be controlled by the 
microcontroller. 

14. A system for checking consistency of a lock-step process as recited in 
Claim 1 wherein the ICE compares the first and the second values and where there 

5 is inconsistency a software residing in the ICE halts the execution of microcontroller 

and issues an error signal. 

15. A method for verifying lock step microcontroller code execution in a 

code debugging process comprising: 

a) initializing a first memory of an ICE (in circuit emulator) and a second 
J|) memory of a microcontroller with microcontroller test code; 
J| b) executing the microcontroller test code on the microcontroller and on 

f| the ICE in lock step; 

0 C ) computing an ICE current instruction result and a microcontroller 

l k current instruction result; 

Sb d) verifying lock step execution by comparing the ICE current instruction 

H> result and the microcontroller current instruction result; 

d) if lock step execution is not verified, halting the execution of the 
microcontroller test code and reporting an error; and 

e) if lock step execution is verified, continuing execution of the 
20 microcontroller test code. 

1 6. The method of Claim 1 5 further comprising: 
if lock step execution is not verified, saving an execution history using a 
trace buffer coupled to the ICE. 
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17. The method of Claim 15 further comprising: 
transmitting the microcontroller current instruction result from the 

microcontroller to the ICE for verifying the lock step execution. 

18. The method of Claim 1 5 wherein the ICE ignores execution of an 
5 instruction if the instruction is an I/O instruction. 

19. The method of Claim 15 wherein the ICE ignores execution of an 
instruction if the instruction is an interrupt. 

20. The method of Claim 15 wherein the ICE independently detects 
inconsistency between the ICE current instruction result and the microcontroller 

Ijo current instruction result when the execution of the microcontroller test code is 
Jf halted. 

21 . A lock step code execution microcontroller testing system comprising: 
3j a microcontroller installed on a test circuit, the microcontroller running 

►* ! microcontroller code, the microcontroller is installed on a POD; 
f^5 an ICE (in circuit emulator) coupled to a host device, wherein the ICE 

JJ emulates the microcontroller using a field programmable gate array ( FPGA) in the 
ICE, the ICE running the microcontroller code simultaneously with the 
microcontroller; and 

an interface for coupling the microcontroller and the ICE enabling data 
20 transmission between the ICE and the microcontroller, wherein the ICE compares a 
microcontroller execution result with an ICE execution result to verify lock step 
microcontroller code execution. 
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22. The system of Claim 21 wherein the ICE ignores execution of the 
microcontroller code if the microcontroller code executed by the microcontroller is 
an I/O instruction. 

23. The system of Claim 21 wherein the ICE ignores execution of the 
microcontroller code if the microcontroller code is an interrupt instruction. 

24. The system of Claim 21 wherein the ICE independently detects 
inconsistency between the microcontroller execution result and the ICE execution 
result when there is a halt in the operation of the microcontroller. 

25. The system of Claim 21 wherein the microcontroller is coupled to 
receive data from a product that is intended to be controlled by the microcontroller. 

26. The system of Claim 21 wherein the microcontroller provides the ICE 
with I/O read information sent by a product that is intended to be controlled by the 
microcontroller. 
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